Manager, Cybersecurity, GISI Consulting Group

Job description

Manager, Cybersecurity, GISI Consulting Group

About GISI ConsultingGroup and Palladium

GISI ConsultingGroup (GISI CG) is a top 10 global provider of program and project managementand engineering consulting services delivering outcomes and solutions for someof the most complex challenges. We deliver services in infrastructure & mobility, earth& water, and government & society segments across more than 100countries. With over 5,000 projectsannually and a global team of over 11,000 professionals, our advisory,consulting, design and program management capabilities enable us to create asafer and more sustainable world. Learn more about GISI CG at https://gisiconsulting.com/.

Palladium, a GISI company, works to design, develop and deliverpositive impact on the lives and livelihoods of people around the globe;broaden access to health, water, power, and infrastructure; build enduring,sustainable, and transformative institutions and market systems to addressglobal challenges; and conserve the natural world. We operate in over 90countries and have a workforce of 2,100 talented, motivated, and diverse staffaround the world. This role will be hired through Palladium, an operationalplatform for GISI CG.

This Opportunity

The Manager, Cybersecurity will supportGISI Consulting Group's (GCG) Operating Companies (OPCOs) in strengtheningtheir cybersecurity posture by advancing their cybersecurity maturity inalignment with GCG global security strategy, policies, and standards. The rolewill act as an advisor to local business and technology teams, conductcybersecurity maturity assessments, identify gaps and risks, drive remediationinitiatives, and support the implementation of security best practices acrossdiverse business environments. The Manager will work closely with the ICTCybersecurity and Compliance workstream teams to ensure consistent applicationof security controls.

This role is a corporate fixed-term position for up to ten months withthe possibility of an extension to one year.

Location

This role will be based remotely in the UK.

To beconsidered for this position, you must have valid work rights in the countrywhere the role is based. Please note that visa sponsorship is not available forthis role.

Reporting Lines

• The Manager will work under the direction of the SVP, IT Operations (based in the US)
• This role will have regular meetings with the Cybersecurity and Compliance workstream teams and key stakeholders from the OPCOs

Primary Roles and Responsibilities

• Partner with assigned OPCOs to assess, improve, and monitor their cybersecurity maturity and alignment with GCG's Information Security Policies and standards
• Identify, assess, and monitor applicable local privacy, regulatory and contractual requirements for assigned OPCOs, and ensure alignment with both local obligations and GCG's standards
• Develop and maintain remediation roadmaps and action plans to address identified security gaps
• Support OPCOs in implementing security controls, standards, and procedures in accordance with GCG's cybersecurity requirements
• Provide guidance on cybersecurity governance, risk management, vulnerability management, incident response, data protection, identity and access management, and third-party risk management
• Develop SOPs, templates, checklists, and guidance documents to support consistent adoption of cybersecurity best practices

EssentialCriteria

• Bachelor's degree in Computer Science, Cybersecurity, or equivalent
• 8+ years of relevant ICT experience in the field of cybersecurity
• Strong understanding of cybersecurity frameworks and industry best practices, including NIST CSF, CIS Controls, ISO 27001, and risk management principles
• Demonstrated experience assessing and improving cybersecurity maturity programs
• Knowledge of security governance, compliance, vulnerability management, incident response, identity and access management, and data protection
• Strong analytical and problem-solving capabilities with the ability to translate technical risks into business impact
• Ability to manage multiple initiatives and priorities across different operating companies
• Excellent communication, presentation, stakeholder management, and relationship-building skills
• Strong project management and organizational skills.
• Ability to work independently while collaborating effectively within a global team environment

Desired Criteria

• Cybersecurity certification desirable

Applications will be accepted on a rolling basis. We encourage you toapply early as the position may close once a suitable candidate is found. Pleasenote that only shortlisted candidates will be contacted.

Equity,Diversity & Inclusion - Palladium is committed to embedding equity, diversity, and inclusion intoeverything we do. We welcome applications from all sections of society andactively encourage diversity to drive innovation, creativity, success and goodpractice. We positively welcome and seek to ensure we achieve diversity in ourworkforce; and that all job applicants and employees receive equal and fairtreatment regardless of their background or personal characteristics. Theseinclude: (but are not limited to) socio-economic background, age, race, genderidentity and expression, religion, ethnicity, sexual orientation, disability,nationality, veteran, marital or Indigenous status.

Should yourequire any adjustments or accommodations to be made during the recruitmentprocess (due to disability, neurodiversity, or for any other circumstance),please email our team at [email protected] and we will be in touch to discuss.

Safeguarding - We define Safeguarding as "thepreventative action taken by Palladium to protect our people, clients and thecommunities we work with from harm". We are committed to ensuring that allchildren and adults who come into contact with Palladium are treated withrespect and are free from abuse. Allsuccessful candidates will be subject to an enhanced selection processincluding safeguarding-focused interviews and a rigorous due diligence process.